Your message dated Mon, 10 Oct 2016 22:16:05 +0200
with message-id
<CAOuMQ30fQ1qAX7hNxM6CWwpeFmpnyOziVT7OiT13TURFxL=y...@mail.gmail.com>
and subject line Re:
has caused the Debian Bug report #272156,
regarding mozilla-thunderbird-enigmail: strange behavior with remember
passphrase
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
272156: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=272156
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: mozilla-thunderbird-enigmail
Version: 2:0.85.0debian1-1
Severity: grave
Tags: security
Justification: user security hole
I ran a few tests on pgp and may have found a bug (or maybe it's a
feature ?!)
I created 2 different mail accounts on Thunderbird, each with a
different pgp key but both with the same passphrase.
I sent a signed mail from the first account, with the option to
remember the passphrase for 5 minutes checked. When I tried to send
another signed mail from the second account, Enigmail didn't ask me
again for the passphrase, even though the pgp key was different.
Yoann
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8.1-mm1
Locale: LANG=fr_FR@euro, LC_CTYPE=fr_FR@euro
Versions of packages mozilla-thunderbird-enigmail depends on:
ii gnupg 1.2.5-3 GNU privacy guard - a free PGP rep
ii libc6 2.3.2.ds1-16 GNU C Library: Shared libraries an
ii libgcc1 1:3.4.2-2 GCC support library
ii libstdc++5 1:3.3.4-11 The GNU Standard C++ Library v3
ii mozilla-thunderbird 0.7.3-6 Mozilla Thunderbird standalone mai
-- no debconf information
--- End Message ---
--- Begin Message ---
..
2016-10-10 22:12 GMT+02:00 Alexander Sack <a...@debian.org>:
> Hi Yoann,
>
> didn't hear back from you. Closing bug for now. If you still see it
> just reopen or let me know!
>
> Thanks!
>
> 2016-09-09 8:42 GMT+02:00 Yoann Moulin <informati...@mistur.org>:
>> Hello,
>>
>> Le 09/09/2016 à 00:41, Alexander Sack a écrit :
>>> tags 272156 + moreinfo
>>> thanks
>>>
>>> Hi,
>>>
>>> thanks for reporting the bug. We would like to identify issues to focus on
>>> and hence
>>> we would love to hear an update if the issue at hand is still something you
>>> would like
>>> to see fix (if it hasn't).
>>>
>>> Thanks!
>>
>> I will do some test this week end, I will let you know if it's still present
>> or not
>>
>> Best regards,
>>
>> --
>> Yoann Moulin
>> linkedin.com/in/yoannmoulin
>> twitter.com/ymoulin
--- End Message ---
_______________________________________________
Pkg-mozext-maintainers mailing list
Pkg-mozext-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-mozext-maintainers
